Forum Discussion

kiran_kumar_684's avatar
kiran_kumar_684
Icon for Nimbostratus rankNimbostratus
Mar 03, 2009

irule to pick certs depending on domains

Hi all,

 

 

Let me explain the scenario first. we have multiple domains registered to single ip. I have certificates created for each domain seperately. Now with an irule i want the client request to pick certificates depending on the domain name.

 

 

eg.

 

domain IP

 

abc.com 10.0.0.1

 

xyz.com 10.0.0.1

 

 

I have both the certificates for abc.com and xyz.com. if i apply an irule for the VIP the F5 must issue the abc.com certificate if the client requests abc.com and must issue xyz.com certificate if the client requests for zyz.com. Can this be done? if yes which option in the ssl header should i be manipulating?
  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Hi,

     

     

    The practical answer is this isn't possible. Check this post for background information:

     

     

    SSL client profile based on hostname (Click here)

     

     

    Aaron